Overview

In the example above, requests to /posts from users that are not signed
in will result in a 404. You can make additional assertions about the user
by passing a block. For instance, if you want to require that the
signed-in user be an admin: